Top all-time · #10137
STAR Labs
Company blog · starlabs.sg/blogsecurity
STAR Labs is the company blog at starlabs.sg, writing about security. Since 2022, 8 different Hacker News readers have linked it 8 times, most often “SharePoint Pre-Auth RCE chain (CVE-2023–29357 and CVE-2023–24955)”. It is still writing: the last post was on 2026-10-17, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
STAR Labs security research blog with vulnerability write-ups, such as privilege escalation on Ubuntu and Omarchy, debug access on a Brother printer, and SharePoint pre-auth RCE.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
STAR Labs SG is a Singapore-based offensive security research and services team. Vulnerability research. Red teaming. Pwn2Own champions.
Most-linked posts?
- SharePoint Pre-Auth RCE chain (CVE-2023–29357 and CVE-2023–24955)2 people · 2 mentions · first linked 2023-09-27
What Hacker News says?
Yes, it does. None of this information changes the fact that, on a fresh install of Ubuntu Server 24+, the default user can privilege escalate to root using a few LXD commands. https://starlabs.sg/blog/2026/06-old-wine-in-a-new-bottle-a-... And yes, I've tried it myself, it works as advertised.
Comment linking /blog/2026/06-old-wine-in-a-new-bottle-a-decade-old-lxd-group-root-re-armed/
on “Omarchy: Any User Process Can Escalate to Root”Submitted Breaking Out of Restricted Mode: XSS to RCE in Visual Studio Code as a story · 2 points
HN discussionThe article linked at the bottom of this is a much more interesting read: https://starlabs.sg/blog/2025/11-breaking-into-a-brother-mfc...
Comment linking /blog/2025/11-breaking-into-a-brother-mfc-j1010dw-three-security-flaws-in-a-seemingly-innocent-printer/
on “Getting debug access on a Brother printer over Telnet”Submitted Microsoft Azure Account Takeover via DOM-Based XSS in Cosmos DB Explorer as a story · 2 points
HN discussionhttps://starlabs.sg/blog/2023/09-sharepoint-pre-auth-rce-cha...
Comment linking /blog/2023/09-sharepoint-pre-auth-rce-chain/
on “Everything authenticated by Microsoft is tainted”Submitted When AI Makes 0-Days Feel Like N-Days as a story · 1 points
HN discussionSubmitted SharePoint Pre-Auth RCE chain (CVE-2023–29357 and CVE-2023–24955) as a story · 1 points
HN discussionSubmitted The Cat Escaped from the Chrome Sandbox as a story · 1 points
HN discussion